Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
File:                     du18SQ0OcUHarCF8uWya8GPtxmY.roa (raw, json)
Hash identifier:          4+WgpYhsJcV2AjkEDYBC5pUh4ldqRO7xn5TXgvf6sOw=
Subject key identifier:   76:ED:7C:49:0D:0E:71:41:DA:AC:21:7C:B9:6C:9A:F0:63:ED:C6:66
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12E3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
Signing time:             Wed 29 Sep 2021 02:55:07 +0000
ROA not before:           Wed 29 Sep 2021 02:55:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4835 (0x12e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=76ED7C490D0E7141DAAC217CB96C9AF063EDC666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:a3:a2:3e:9d:25:39:4b:67:2c:e3:0d:e5:
                    40:38:df:50:ed:00:ba:f9:8d:58:d9:57:cc:c7:d0:
                    46:aa:fc:be:0b:a7:8c:24:82:8e:7f:3d:2a:4e:a4:
                    da:0f:3a:9d:58:9f:2b:71:ed:ae:1a:80:f2:6a:9b:
                    d7:7a:30:ff:4f:66:51:ae:23:7e:1d:0c:37:88:fc:
                    7a:22:10:c6:1a:a7:49:66:37:93:21:8d:5b:89:80:
                    9d:48:7e:fe:b7:1b:92:7f:c1:92:b1:fc:98:84:81:
                    50:50:fc:61:5b:dd:a0:8b:c6:0d:70:00:dd:c8:6c:
                    83:35:78:31:f6:57:5d:3b:c9:20:0f:4e:b8:70:d2:
                    bc:33:ae:7b:cb:29:60:b2:82:37:22:2a:a5:3e:c9:
                    7c:4c:24:d4:32:60:72:d1:7d:70:e0:57:54:3e:d1:
                    18:00:65:b5:ce:f7:e9:21:fc:ae:c0:bd:a4:dc:d1:
                    e3:26:a4:f4:58:01:56:cb:67:73:1c:23:ff:2b:f9:
                    f9:6d:ce:14:a7:95:cd:73:97:56:d3:2e:34:34:91:
                    fa:9f:5b:32:da:d3:fe:ed:84:9d:94:4e:bf:37:65:
                    3b:16:e2:dc:73:45:b3:55:66:cd:09:3c:6c:68:82:
                    0c:ff:c4:0b:4c:68:da:24:49:7e:1a:0b:47:ef:de:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:7C:49:0D:0E:71:41:DA:AC:21:7C:B9:6C:9A:F0:63:ED:C6:66
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:96:85:5f:59:de:66:a1:9a:dd:c8:61:00:be:9a:18:b5:
         1e:22:e9:2d:f0:8c:62:ab:37:7c:f9:b2:63:52:4a:fe:83:2b:
         c3:11:0a:d5:65:b8:2e:b2:d7:48:9c:f3:b7:31:0a:60:3a:5a:
         8e:3f:09:9a:9e:18:9e:96:92:3e:64:c6:0b:ce:85:aa:c2:e8:
         c8:bd:59:d7:80:c1:16:78:fd:63:b9:31:6a:ef:cf:ef:3a:14:
         05:47:15:bc:59:a5:9a:af:93:2e:b1:08:89:73:c2:3f:20:f8:
         34:c1:f8:85:fc:71:11:31:42:11:d2:db:4d:b3:17:1e:c9:50:
         ae:5e:6d:6f:b0:4f:3b:75:77:74:b1:a5:88:a5:94:63:88:f3:
         55:53:d6:30:ac:4c:26:07:df:95:f6:37:d0:fd:ad:06:c5:90:
         4b:47:47:f8:75:bf:7a:84:36:41:af:fe:9a:e3:52:ec:63:40:
         e8:74:cb:48:23:34:ca:9d:e7:5a:59:37:fb:05:cf:aa:5d:85:
         48:72:6e:d8:ee:2e:f8:05:d8:73:f6:e7:b9:66:6e:37:a6:f1:
         f2:5e:c3:88:1d:9e:7b:5f:31:3e:82:6b:a9:ea:e9:38:b1:4a:
         05:c9:93:fe:47:4f:5a:d7:a8:cd:66:cd:99:bf:ab:d4:cc:4e:
         5e:2e:24:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc2RUQ3QzQ5MEQwRTcx
NDFEQUFDMjE3Q0I5NkM5QUYwNjNFREM2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChDaOiPp0lOUtnLOMN5UA431DtALr5jVjZV8zH0Eaq/L4Lp4wk
go5/PSpOpNoPOp1Ynytx7a4agPJqm9d6MP9PZlGuI34dDDeI/HoiEMYap0lmN5Mh
jVuJgJ1Ifv63G5J/wZKx/JiEgVBQ/GFb3aCLxg1wAN3IbIM1eDH2V107ySAPTrhw
0rwzrnvLKWCygjciKqU+yXxMJNQyYHLRfXDgV1Q+0RgAZbXO9+kh/K7AvaTc0eMm
pPRYAVbLZ3McI/8r+fltzhSnlc1zl1bTLjQ0kfqfWzLa0/7thJ2UTr83ZTsW4txz
RbNVZs0JPGxoggz/xAtMaNokSX4aC0fv3grNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdu18SQ0OcUHarCF8uWya8GPtxmYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2R1MThTUTBPY1VIYXJDRjh1
V3lhOEdQdHhtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2kAwDQYJKoZIhvcNAQELBQADggEBABKyloVfWd5moZrdyGEAvpoYtR4i6S3wjGKr
N3z5smNSSv6DK8MRCtVluC6y10ic87cxCmA6Wo4/CZqeGJ6Wkj5kxgvOharC6Mi9
WdeAwRZ4/WO5MWrvz+86FAVHFbxZpZqvky6xCIlzwj8g+DTB+IX8cRExQhHS202z
Fx7JUK5ebW+wTzt1d3SxpYillGOI81VT1jCsTCYH35X2N9D9rQbFkEtHR/h1v3qE
NkGv/prjUuxjQOh0y0gjNMqd51pZN/sFz6pdhUhybtjuLvgF2HP257lmbjem8fJe
w4gdnntfMT6Ca6nq6TixSgXJk/5HT1rXqM1mzZm/q9TMTl4uJI8=
-----END CERTIFICATE-----